added Azure AI User role to deployer

Ragini-Microsoft · Ragini-Microsoft · commit de0f11abac12 · 2026-01-08T14:09:48.000+05:30
diff --git a/content-gen/infra/main.bicep b/content-gen/infra/main.bicep
@@ -501,6 +501,11 @@ module aiFoundryAiServices 'br/public:avm/res/cognitive-services/account:0.14.0'
         principalId: userAssignedIdentity.outputs.principalId
         principalType: 'ServicePrincipal'
       }
+      {
+        roleDefinitionIdOrName: '53ca6127-db72-4b80-b1b0-d745d6d5456d' // Azure AI User for deployer
+        principalId: deployer().objectId
+        principalType: 'User'
+      }
     ]
     diagnosticSettings: enableMonitoring ? [{ workspaceResourceId: logAnalyticsWorkspaceResourceId }] : null
     publicNetworkAccess: enablePrivateNetworking ? 'Disabled' : 'Enabled'

Original file line number	Diff line number	Diff line change
`@@ -501,6 +501,11 @@ module aiFoundryAiServices 'br/public:avm/res/cognitive-services/account:0.14.0'`
`501`	`501`	`principalId: userAssignedIdentity.outputs.principalId`
`502`	`502`	`principalType: 'ServicePrincipal'`
`503`	`503`	`}`
	`504`	`+ {`
	`505`	`+ roleDefinitionIdOrName: '53ca6127-db72-4b80-b1b0-d745d6d5456d' // Azure AI User for deployer`
	`506`	`+ principalId: deployer().objectId`
	`507`	`+ principalType: 'User'`
	`508`	`+ }`
`504`	`509`	`]`
`505`	`510`	`diagnosticSettings: enableMonitoring ? [{ workspaceResourceId: logAnalyticsWorkspaceResourceId }] : null`
`506`	`511`	`publicNetworkAccess: enablePrivateNetworking ? 'Disabled' : 'Enabled'`